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DETAILED ACTION 



1 . Claims 1 -1 7 are pending in this office action, claims 1 and 1 7 are newly amended 
to fix examiners objections. 

2. Applicant's arguments, see page 2-3, filed April 7, 2004, with respect to the 
rejection(s)of claim(s) 1-17 under 35 U.S.C. 103(a) have been fully considered and are 
persuasive. Therefore, the rejection has been withdrawn. However, upon further 
consideration, a new ground(s) of rejection is made in view of Kim et al. (USPN 
5,799,081 ) in view of ITU-T, and further in view of Zhang et al. (USPN 6,550,008). 

Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

4. Claims 1-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over Kim 
et al. (U.S. Patent No. 5,799,081) in view of Zhana et al. (U.S. Patent No. 6,550,008), 
and further in view of International Telecommunication Union , hereinafter referred to as 
ITU-T. 
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Regarding clainn 1 , Kim et al. teaches a system for copy protecting information, 
the system comprising: 

• A point of deployment module (fig. 4, ref. num 22); and 

• A set-top box including (fig. 4, ref. num 20); 

• Wherein the set-top box transmits a request message for information (fig. 21 , 
host device transfers EMM, ECM, and CPTC to smart card), 

• The point of deployment module generates a reply message (fig. 21 , smart card 
responds by sending CW), 

• The reply message including at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 18, 
lines 46-48) and 

• Generating a first key in the point of deployment module, using the at least one 
control information pair (fig. 21 , CW created in deployment module from EMM, 
ECM, and CPTC). 

Kim et al. does not specifically teach the control information pair includes a 
stream identifier, generating a second key in the set-top box, the point of deployment 
module encrypting the information with the first shared key and transmitting the 
encrypted information to the set-top box, and the set-top box decrypting the encrypted 
information with the second shared key when the first and second shared keys match. 
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Zhang et al. teaches generating a second key in the set-top box (col. 10, lines 
10-17), the point of deployment module encrypting the information with the first shared 
key and transmitting the encrypted information to the set-top box (col. 10, lines 22-25), 
and the set-top box decrypting the encrypted information with the second shared key 
when the first and second shared keys match (col. 10, lines 25-29). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a second key in the set-top box, the POD 
encrypting the information with the first shared key and transmitting the information to 
the set-top box, and the set-top box decrypting the information when the keys match, as 
taught by Zhang et a!. , with the system of Kim et al. It would have been obvious to 
combine generating a second key in the set-top box, the POD encrypting the 
information with the first shared key and transmitting the information to the set-top box, 
and the set-top box decrypting the information when the keys match, as taught by 
Zhang et al. , with the system of Kimet al. because shared session keys, used for 
symmetric key cryptosystems, provide authentication of devices as well as keeping data 
secure. 

Kim et al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 
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- It would have been obvious to one of ordinary skill in the art, at the tinne the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T . with the system of Kim et al. as modified by Zhang et al. 
It would have been obvious to combine the control information pair including a stream 
identifier, as taught by ITU-T . with the system of Kim et al. as modified by Zhang et al. 
because a stream identifier would identify the elementary stream, e.g., data files. This 
is similar to how ECM contains a content identifier to correctly identify the content in 
which it refers to. The teachings of Kim et al. use ECM to identify the content, which 
can be transferred together with the CPTC (see col. 18, lines 61-67 of Kim et al.). 

Regarding claim 2 , Kim et al. teaches a method of copy protecting information 
transmitted between a deployment module and a host device, the method comprising 
the steps of: 

• Transmitting a request message for the information from the host device to the 
deployment module (fig. 21 , host device transfers EMM, ECM, and CPTC to 
smart card); 

• Transmitting a reply message from the deployment module to the host device 
(fig. 21 , smart card responds by sending CW), 

• Wherein the reply message includes at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 18, 
lines 46-48) and; 
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• Generating a second shared key at the deployment module, using the at least 
one control information pair and an encryption means (fig. 21 , CW created in 
deployment module from EMM, ECM, and CPTC); 

• Decrypting, at the host, the encrypted information (fig, 21 , ref . num 263 uses CW 
to decrypt the information). 

Kim et al. does not specifically teach the control information pair includes a 
stream identifier, encrypting, in the deployment module, the information, transmitting the 
encrypted information from the deployment module to the host, and receiving the 
information at the host when the first and second shared keys match. 

Zhang et al. teaches generating a second key in the set-top box (col. 10, lines 
10-17), the point of deployment module encrypting the information with the first shared 
key and transmitting the encrypted information to the set-top box (col. 10, lines 22-25), 
and the set-top box decrypting the encrypted information with the second shared key 
when the first and second shared keys match (col. 10, lines 25-29). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a second key in the set-top box, the POD 
encrypting information with the first shared key and transmitting the information to the 
set-top box, and the set-top box decrypting the information with the second shared keys 
when they match, as taught by Zhang et al. , with the system of Kimetal. It would have 
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been obvious to connbine generating a second key in the set-top box, the POD 
encrypting information with the first shared key and transmitting the information to the 
set-top box, and the set-top box decrypting the information with the second shared keys 
when they match, as taught by Zhang et al. , with the system of Kim et al. because 
shared session keys, used for symmetric key cryptosystems, provide authentication of 
devices as well as keeping data secure. 

Kim et al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the method of Kimetal. as modified by Zhang et al. 
It would have been obvious to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the method of Kimet al. as modified by Zhang et al. 
because a stream identifier would identify the elementary stream, e.g., data files. This 
is similar to how ECM contains a content identifier to correctly identify the content in 
which it refers to. The teachings of Kim et al. use ECM to identify the content, which 
can be transferred together with the CPTC (see col. 18, lines 61-67 of Kim et al,). 
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Regarding claim 3 , the combination of Kim et al. as modified by Zhang et al./ITU- 
T teaches wherein the deployment module is a point of deployment module (see col. 3, 
line 16 of Zhang et al.). 

Regarding claim 4 , the combination of Kim et al. as modified bv Zhang et al./ITU- 
T teaches wherein the host is a set-top box (see col. 1, line 28 of Zhang et al.). 

Regarding claim 5 . the combination of Kim et al. as modified bv Zhang et al./ITU- 
T teaches wherein the encryption means includes a hash function (see col. 10, lines 36- 
39ofZhangetal.). 

Regarding claim 6 . the combination of Kimet al. as modified by Zhang et al./ITU- 
T teaches wherein the encrypted information in an elementary stream of information is 
encrypted with the first shared key (see fig. 4, step num 9 of Zhang et al.). 

Regarding claim 7 , the combination of Kimetal. as modified by Zhang et al./ITU- 
T teaches wherein the stream identifier that is transmitted to the host is incorporated 
with the Packetized Elementary Stream (PES) header of the elementary stream (see 
page xi, section intro. 8.1 of ITU-T). 



Regarding claim 8 . Kim et al. teaches a deployment module for use with a host 
device, the deployment module comprising: 
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• Means for communicating with the host device (fig. 4, ref. num 23 and col. 2, 
lines 54-56); and 

• A processor for (fig. 5, ref. num 39 and col. 3, lines 25-27), 

o In response to a request message for Information from the host device, 
generating a reply message to the host device (fig. 21 , host device 
transfers EMM, ECM, and CPTC to smart card in exchange for CW), 

• The reply message including at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 18, 
lines 46-48), 

• Generating a first shared key using the at least one control information pair (fig. 
21, CW created in deployment module from EMM, ECM, and CPTC, i.e., the 
control information pair). 

Kimet al. does not specifically teach the control information pair includes a 
stream identifier, the generating of a first key is for a shared key, and encrypting the 
information with the first shared key and transmltfing the encrypted information to the 
host device. 

Zhang et al. teaches the generating of a first key is for a shared key (col. 1 0, 
lines 10-17), and encrypting the information with the first shared key and transmitting 
the encrypted information to the host device (col. 10, lines 22-25). 
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It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a first shared key and encrypting the 
information with the first shared key and transmitting the encrypted information to the 
host device, as taught by Zhang et al. , with the system of Kim et al. It would have been 
obvious to combine generating a first shared key and encrypting the information with the 
first shared key and transmitting the encrypted information to the host device, as taught 
by Zhang et aL , with the system of KimetaL because shared session keys, used for 
symmetric key cryptosystems, provide authentication of devices as well as keeping data 
secure. 

Kim et al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the module of Kim et al. as modified by Zhang et al. 
It would have been obvious to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the module of Kim et al, as modified by Zhang et al. 
because a stream identifier would identify the elementary stream, e.g., data files. This 
is similar to how ECM contains a content identifier to correctly identify the content in 
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which it refers to. The teachings of Kinn et al. use ECM to identify the content, which 
can be transferred together with the CPTC (see col. 18, lines 61-67 of Kinn et al.). 

Regarding clainns 9 and 14 , the combination of Kim et al. as modified by Zhang 
etal. /ITU-T teaches wherein the deployment module is selected from the group 
consisting of a point of deployment module, wireless data interface appliance, 
smartcard, personal computer, or Internet interface appliance (see col. 3, line 16 of 
Zhang et al.). 

Regarding claims 10 and 15 , the combination of Kim et al. as modified by Zhang 
et al. /ITU-T teaches wherein the host is a set-top box (see col. 1 , line 28 of Zhang et 
al.). 

Regarding claims 11 and 16 , the combination of Kim etal. as modified by Zhang 
et al. /ITU-T teaches wherein the encrypted information is transmitted to the host device 
using a transport stream, wherein the transport stream includes at least one elementary 
stream (the Examiner believes it to be inherent that the information is transmitted to the 
host using a transport stream because the information taught by Kim et al. to be 
transmitted includes MPEG data (see col. 2, lines 57-59 of Kim et al.), which is well 
known to be transmitted in a transport stream). 
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Regarding claims 12 and 17 . the combination of Kim et al. as modified by Zhang 
et al. /ITU-T teaches wherein respective ones of the at least one control information 
pairs is associated with respective ones of the at least one elementary streams (see 
Fig. F7 of ITU-T, an elementary stream is associated with control information pairs 
because each elementary stream requires a stream identifier). 

Regarding claim 13 , Kim et al. teaches a host device for use with a deployment 
module (fig. 7), the host device comprising: 

• Means for communicating with the deployment module (fig. 4, ref. num 23); and 

• A processor for (fig. 4, ref. num 27), 

o Generating a request message for information to the deployment module, 
and in response, receiving a reply message from the deployment module 
(fig. 21 , host device transfers EMM, ECM, and CPTC to smart card in 
exchange for CW), 

• Wherein the reply message including at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 18, 
lines 46-48), 

• Decrypting encrypted information, received from the deployment module, with the 
second shared key (fig. 21, ref. num 263 uses CW to decrypt the information). 



Kim et al. does not specifically teach the control information pair includes a 
stream identifier, generating a second shared key using the at least one control 
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information pair, and receiving the information when the second shared key matches a 
first shared key generated in the deployment module. 

Zhang et al. teaches generating a second key in the set-top box (col. 10, lines 
10-17), and receiving the information when the second shared key matches a first 
shared key generated in the deployment module (col. 10, lines 25-29). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a second key in the set-top box and 
receiving the information when the shared keys match, as taught by Zhang et al. , with 
the system of Kim et al. It would have been obvious to combine generating a second 
key in the set-top box and receiving the information when the shared keys match, as 
taught bv Zhang et a!. , with the system of Kim et al. because shared session keys, used 
for symmetric key cryptosystems, provide authentication of devices as well as keeping 
data secure. 

Kim et al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 
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It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the module of Kim et aL as modified by Zhang et aL 
It would have been obvious to combine the control information pair including a stream 
identifier, as taught by ITU-T . with the module of Kim et al. as modified by Zhang et al. 
because a stream identifier would identify the elementary stream, e.g., data files. This 
is similar to how ECM contains a content identifier to correctly identify the content in 
which it refers to. The teachings of Kim et al. use ECM to identify the content, which 
can be transferred together with the CPTC (see col. 18, lines 61-67 of Kim et al.). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon Hoffman whose telephone number is 703-305- 
4662. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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